Evidence Lifecycle Deep Dive¶
Purpose¶
Evidence links request intent, trust checks, policy outcomes, approvals, execution results, and containment actions.
Lifecycle¶
- Initialize evidence record with correlation and causation IDs.
- Append identity, authority, policy, and approval events.
- Append runtime and connector events.
- Seal finalized evidence bundle for immutable review context.
- Support audit and incident analysis.
Evidence Quality Criteria¶
- Deterministic serialization
- UTC timestamping
- Explicit reason codes
- Event attribution
- Finalized bundle immutability semantics
Diagram¶
Source: diagrams/../diagrams/evidence-lifecycle.mmd
Related ADR: